Cross site scripting

Unauth. Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Paypal Payments plugin = 5.7.25 versions...

CVE-2023-25713

CVE-2023-25713 affects the WordPress plugin Quick Paypal Payments (Fullworks) up to version 5.7.25, with an unauthenticated Stored XSS vulnerability arising from insufficient input sanitization/escaping. Impact described in connected sources includes cross-site scripting exposure to unauthenticat...

CVE-2023-25702

CVE-2023-25702 affects the WordPress Quick Paypal Payments (Fullworks) plugin ≤ 5.7.25. The root cause is insufficient sanitization/escaping in settings, enabling Admin+ Stored XSS. Impact per sources is stored XSS with low overall risk, requiring high privileges and user interaction in some vect...

CVE-2023-25702 WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-site Scripting XSS vulnerability in Fullworks Quick Paypal Payments plugin = 5.7.25 versions...

CVE-2023-23885

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Contact Form plugin = 8.0.3.1 versions...

CVE-2023-23885

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Contact Form plugin = 8.0.3.1 versions...

CVE-2023-23885 WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Contact Form plugin = 8.0.3.1 versions...

CVE-2023-23885 WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Contact Form plugin = 8.0.3.1 versions...

CVE-2023-23885

Summary of CVE-2023-23885 : Affected: WordPress Quick Contact Form plugin

PT-2023-20256

Name of the Vulnerable Software and Affected Versions Fullworks Quick Paypal Payments plugin versions prior to 5.7.26 Description The issue is related to a Stored Cross-site Scripting XSS vulnerability. This vulnerability requires authentication with admin+ privileges. Recommendations For version...

WordPress Plugin Quick Paypal Payments 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

PT-2023-19282

Name of the Vulnerable Software and Affected Versions Fullworks Quick Contact Form plugin versions prior to 8.0.3.2 Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or higher-privileged users. There is no...

WordPress plugin Quick Contact Form 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

CVE-2023-25713: Improper Neutralization of Input During Web Page Generation

Unauth. Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Paypal Payments plugin = 5.7.25 versions...

PT-2023-20267

Name of the Vulnerable Software and Affected Versions Fullworks Quick Paypal Payments plugin versions prior to 5.7.26 Description The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. No information is provided about the estimated number of potentially affected devices...

CVE-2023-25702: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-site Scripting XSS vulnerability in Fullworks Quick Paypal Payments plugin = 5.7.25 versions...

CVE-2023-23885: Improper Neutralization of Input During Web Page Generation

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Contact Form plugin = 8.0.3.1 versions...

CVE-2023-23979

Unauth. Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Event Manager plugin = 9.7.4 versions...

Cross site scripting

Unauth. Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Event Manager plugin = 9.7.4 versions...

CVE-2023-23979 WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Event Manager plugin = 9.7.4 versions...